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DETAILED ACTION 

1 . The instant application having Application No. 1 0560220 filed on December 9, 2005 is 
presented for examination by the examiner. 

Oath/Declaration 

2. The applicant's oath/declaration has been reviewed by the examiner and is found to 
conform to the requirements prescribed in 37 C.F.R. 1.63. 

Priority 

3. As required by M.P.E.P. 201.14(c), acknowledgement is made of applicant's claim for 
priority based on applications filed on June 16, 2003 (Republic of Korea 10-2003-0038892). 

Receipt is acknowledged of papers submitted under 35 U.S.C. 1 19(a)-(d), which papers 
have been placed of record in the file. 

Drawings 

4. The applicant's drawings submitted are acceptable for examination purposes. 

Specification 

5. The specification is objected to because of the following informalities: 

On page 9, paragraph 19, line 2, the term "a second embodiment" appears to be "a third 
embodiment" instead. 
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On page 16, paragraph 76, line 4, the term "the round key generation unit 100" appears to 
be "the round key generation unit 110" instead. 
Appropriate correction is required. 

Claim Objections 

6. Claim 1 objected to because of the following informalities: 
"at lease" appears to be "at least". 

Claim 3 objected to because of the following informalities 
"at lease" appears to be "at least". 

Claim 5 objected to because of the following informalities: 
"at lease" appears to be "at least". 

Appropriate correction is required. 

Claim Rejections - 35 USC §112 

7. Claims 1, 3, and 5 are rejected under 35 U.S.C. 1 12, second paragraph, as being 
indefinite for failing to particularly point out and distinctly claim the subject matter which 
applicant regards as the invention. 

Claims 1, 3, and 5 recites the limitation "n" in the claims, however, "n" is not defined 
either in specification nor claims. 



on page 50, line 6, the term 



: on page 50, line 26, the term 



on page 51, line 13, the term 
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Claim Rejections - 35 USC § 103 

8. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

9. Claims 1-12 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Yang (US 2002/0131588), in view of Roussel et. al. (US 6230257) (hereinafter Roussel). 

As per claim 1 , Yang discloses "A rijndael block encryption apparatus having M-bit 
input data and N-bit input keys" (page 1, column 2, paragraph 0010, "an apparatus for 
encrypting/decrypting a real-time input stream". With respect to the limitations of input data and 
input keys, in Fig. 1 Data_in [7:0] appears to be the input data and Key_data [128,192,256] 
appear to be the inputs keys) "and encrypting the M-bit input data by repeating for a 
predetermined number of times a round operation" (page 3, column 1, paragraph 0043, with 
respect to this limitation, Yang discloses "if the block size is 128 bits and a size of the key value 
is 256 bits, a count of rounds becomes ' 14"' "if the block size is 128 bits and a size of the key 
value is 128 bits, a count of rounds becomes '10'") "that includes transforms of shift_row, 
substitution, mixcolumn and add-round-key" (Fig. 4 discloses "Shifter (Shiftrow)", "Data 
conversion unit (Byte sub)", "Mixer (Mixcolm)", and "Key mixer (Add round key)) "the 
apparatus comprising: a round operation unit including a round operation execution unit 
for processing the data at lease in the transforms of substitution, mixcolumn and add- 
round-key" (page 3, column 2, paragraph 0048, "Fig. 4 illustrates a detailed block diagram of 
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an encryption unit of 'the block round unit' 203 in Fig. 2". Fig. 4 illustrates the transforms of 
"Shifter (Shift row)", "Data conversion unit (Byte sub)", "Mixer (Mix colm)", and "Key mixer 
(Add round key)) "and a round key generation unit for generating round keys in order to 
provide the round keys in the transform of the add-round-key; a round operation control 
unit for controlling the round operation performed by the round operation unit" (page 1, 
paragraph 0013, "a key schedule unit carrying out a key schedule every round in accordance with 
a size and a key value of a block inputted from outside so as to output a key value for the 
encryption or decryption each round") "and a data storage unit for storing M-bit data 
generated at an end stage of every round." (Page 4, column 1, paragraph 0057, "an output 
buffer 603 receiving the encrypted or decrypted data Out_block [127:0]"). 

Yang fails to disclose "processing the data in the unit of M/m bits (where m is 2, 3 
or 4)" and "a data storage unit for storing M/n-bit intermediate data generated by the 
round operation unit at an intermediate stage of every round". 

However, Roussel discloses "processing the data in the unit of M/m bits" (column 12, 
line 1-9, "processing 128-bit instructions using existing 64-bit hardware systems without 
significant changes to the hardware") "Where m is 2, 3 or 4" (column 11, line 23-48, "although 
the above embodiment describes the macro instruction being divided into two micro operations, 
alternate embodiments may divide the macro instruction into more micro instruction") and 
"Storing M/n-bit intermediate data generated by the round operation unit at an 
intermediate Stage of every round" (Fig. 4, a register is an intermediate storage unit, 
therefore, data conversion unit, shifter, mixer, key mixer are registers. Four of the registers 
process the input data at the same time stores data temporarily). 
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Yang and Roussel are analogous art because both arts focus on the goal of reusing the 
existing hardware resource to reduce the size and cost of the hardware when come to design 
circuits. 

It would have been obvious to one of ordinary skill in the art at the time of invention to 
apply the Rijndael block cipher algorithm that encrypt/decrypt information on a hardware-critical 
environment to process 128-bit instruction application using 64-bit hardware system teaching of 
Yang by adopting the concept "staggering execution of a single packed data instruction using the 
same circuit" from Roussel to utilize the existing hardware resource, reduce the size and cost of 
hardware. 

As per claim 2 . Yang discloses "The apparatus as claimed in claim 1 , wherein the 
data storage unit includes at least one register, and a total summed size of the register 
is equal to or larger than M (2m-1 )/m bits" (Fig. 5 and Fig. 6, registers are intermediate 
storage units, therefore, examiner considers unit 500 in Fig. 5 is a storage unit, unit 603 in Fig. 6 
is the other storage unit. There are two set of storage units, which includes four individual 
registers in unit 500 in Fig. 5 of total 508 bits - 127 bit multiplies 4, plus the "out buffer" storage 
in Fig. 6 of 127 bit. The total summed sized of the register is 635 bit. As applicant states in 
claim 1 "where m is 2, 3, or 4", if m is 2, M the input data in Yang is 127 bit, then M(2m-1 )/m is 
1 27(2*2-1 )/2 that equals 190.5 bits. The total summed sized of the registers in Yang of 635 bit 
is large than the 190.5 bit). 

As per claim 3 . Yang discloses "A rijndael block decryption apparatus having M-bit 
input data and N-bit input keys" (page 1, column 2, paragraph 0010, "an apparatus for 
encrypting/decrypting a real-time input stream" "by constructing Rijndael algorithm selected as 
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AES algorithm with hardware". With respect to the limitations of input data and input keys, in 
Fig. 1 Data in [7:0] appears to be the input data and Key data [128,192,256] appear to be the 
inputs keys) "and decrypting the M-bit input data by repeating for a predetermined 
number of times a round operation" (page 3, column 1, paragraph 0043, with respect to this 
limitation, Yang discloses "decrypting" by "finding the key for encryption or decryption". Yang 
also discloses "if the block size is 128bits and a size of the key value is 256 bits, a count of 
rounds becomes '14'" "if the block size is 128 bits and a size of the key value is 128 bits, a count 
of rounds becomes '10'") "that includes transforms of inverse shift_row, inverse 
substitution, add-round-key and inverse mixcolumn" (Fig. 5 discloses transforms of 
"I_shift_row", "I_byte_sub", "Addroundkey", and "I_mix_colm") "the apparatus 
comprising: a round operation unit including a round operation execution unit for 
processing the data at lease in the transforms of inverse substitution, add-round-key 
and inverse mixcolumn" (page 3, column 2, paragraph 0048, "Fig. 4 illustrates a detailed 
block diagram of an encryption unit of 'the block round unit' 203 in Fig. 2". Fig. 4 illustrates the 
transforms of "Shifter (Shift row)", "Data conversion unit (Byte sub)", "Mixer (Mix colm)", 
and "Key mixer (Add round key)). Yang also discloses "if the decryption is being carried out, 
the encryption in Fig. 4 is carried out in reverse. The reverse process is shown in Fig. 5") "and a 
round key generation unit for generating round keys in order to provide the round keys 
in the transform of add-round-key; a round operation control unit for controlling the 
round operation performed by the round operation unit" (page 1, paragraph 0013, "a key 
schedule unit carrying out a key schedule every round in accordance with a size and a key value 
of a block inputted from outside so as to output a key value for the encryption or decryption each 
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round") "and a data storage unit for storing M-bit data generated at an end stage of 
every round" (the rejection of the corresponding section in claim 1 also applies here in claim 2). 

Yang fails to disclose "processing the data in the unit of M/m bits (where m is 2, 3 
or 4)" and "data storage unit for storing M/n-bit intermediate data generated by the round 
operation unit at an intermediate stage of every round". 

However, Roussel discloses "processing the data in the unit of M/m bits" (column 12, 
line 1-9, "processing 128-bit instructions using existing 64-bit hardware systems without 
significant changes to the hardware") "Where m is 2, 3 or 4" (column 11, line 23-48, "although 
the above embodiment describes the macro instruction being divided into two micro operations, 
alternate embodiments may divide the macro instruction into more micro instruction") 

Yang and Roussel are analogous art because both arts focus on the goal of reusing the 
existing hardware resource to reduce the size and cost of the hardware when come to design 
circuits. 

It would have been obvious to one of ordinary skill in the art at the time of invention to 
apply the Rijndael block cipher algorithm that encrypt/decrypt information on a hardware-critical 
environment to process 128-bit instruction application using 64-bit hardware system teaching of 
Yang by adopting the concept "staggering execution of a single packed data instruction using the 
same circuit" from Roussel to utilize the existing hardware resource, reduce the size and cost of 
hardware. 

As per claim 4 , Yang discloses "the apparatus as claimed in claim 3, wherein the 
data storage unit includes at least one register, and a total summed size of the register 
is equal to or larger than M (2m-1 )/m bits" (Fig. 5 and Fig. 6, registers are intermediate 
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storage units, therefore, there are four registers in Fig. 5 of total 508 bits - 127 bit multiplies 4, 
plus the "outbuffer" storage in Fig. 6 of 127 bit. The total summed sized of the register is 635 
bit. As applicant states in claim 1 "where m is 2, 3, or 4", if m is 2, M the input data in Yang is 
127 bit, then M(2m-1 )/m is 1 27(2*2-1 )/2 that equals 190.5 bits. The total summed sized of the 
registers in Yang of 635 bit is large than the 190.5 bit). 

As per claim 5 . Yang discloses "A rijndael block encryption apparatus having M-bit 
input data and N-bit input keys" (page 1, column 2, paragraph 0010, "an apparatus for 
encrypting/decrypting a real-time input stream" "by constructing Rijndael algorithm selected as 
AES algorithm with hardware". With respect to the limitations of input data and input keys, in 
Fig. 1 Data_in [7:0] appears to be the input data and Key_data [128,192,256] appear to be the 
inputs keys) "and encrypting the M-bit input data by repeating for a predetermined 
number of times a round operation for encryption" (page 3, column 1, paragraph 0043, with 
respect to this limitation, Yang discloses "if the block size is 128 bits and a size of the key value 
is 256 bits, a count of rounds becomes ' 14"' "if the block size is 128 bits and a size of the key 
value is 128 bits, a count of rounds becomes '10'") "that includes transforms of shift_row, 
substitution, mixcolumn and add-round-key" (Fig. 4 discloses "Shifter (Shift row)", "Data 
conversion unit (Byte sub)", "Mixer (Mixcolm)", and "Key mixer (Add round key)) "or 
decrypting the M-bit input data by repeating for a predetermined number of times a 
round operation" (page 3, column 1, paragraph 0043, with respect to this limitation, Yang 
discloses "decrypting" by "finding the key for encryption or decryption". Yang also discloses "if 
the block size is 128bits and a size of the key value is 256 bits, a count of rounds becomes ' 14"' 
"if the block size is 128 bits and a size of the key value is 128 bits, a count of rounds becomes 
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'10'") "for decryption that includes transforms of inverse shift_row, inverse substitution, 
add-round-key and inverse mixcolumn" (page 3, column 1, paragraph 0043, with respect to 
this limitation, Yang discloses "decrypting" by "finding the key for encryption or decryption". 
Yang also discloses "if the block size is 128bits and a size of the key value is 256 bits, a count of 
rounds becomes '14'" "if the block size is 128 bits and a size of the key value is 128 bits, a count 
of rounds becomes '10'") "the apparatus comprising: a round operation unit including a 
round operation execution unit for processing the data at lease in the transforms of 
substitution, mixcolumn and add-round-key in an encryption mode" (Fig. 4, the block 
round unit serves the same function as round operation unit. It includes at least substitution 
which in instant application "data conversion unit(byte_sub)", mixcolumn which in instant 
application "mixer", and add-round-key which in instant application "key mixer") "and for 
processing the data at lease in the transforms of inverse substitution, add-round-key 
and inverse mixcolumn in a decryption mode" (Fig. 5, the block round unit includes at least 
inverse substitution which in instant application "data conversion unit(Ibytesub)", add-round- 
key which in instant application "key mixer", and mixcolumn which in instant application 
"inverse mixer") "and a round key generation unit for generating round keys in order to 
provide the round keys in the transform of add-round-key; a round operation control unit 
for controlling the round operation performed by the round operation unit" (page 1, 
paragraph 0013, "a key schedule unit carrying out a key schedule every round in accordance with 
a size and a key value of a block inputted from outside so as to output a key value for the 
encryption or decryption each round"); "and a data storage unit for storing M-bit data 
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generated at an end stage of every round" (page 4, column 1, paragraph 0057, "an output 
buffer 603 receiving the encrypted or decrypted data Out_block[ 127:0]"). 

Yang fails to disclose "processing the data in the unit of M/m bits (where m is 2, 3 
or 4)" "round operation unit processing data both in encryption mode and decryption 
mode", and "data storage unit for storing M/n-bit intermediate data generated by the 
round operation unit at an intermediate stage of every round". 

However, Roussel discloses "processing the data in the unit of M/m bits" (column 12, 
line 1-9, "processing 128-bit instructions using existing 64-bit hardware systems without 
significant changes to the hardware") "Where m is 2, 3 or 4" (column 1 1, line 23-48, "although 
the above embodiment describes the macro instruction being divided into two micro operations, 
alternate embodiments may divide the macro instruction into more micro instruction") "round 
operation unit processing data both in encryption mode and decryption mode" (in Fig. 1, 
the encryption/decryption unit which includes block round unit serves round operation function, 
the input line Encrypt en controls mode switch either to encryption mode or decryption mode), 
and "data storage unit for storing M/n-bit intermediate data generated by the round 
operation unit at an intermediate stage of every round" (Fig. 4, a register is an intermediate 
storage unit, therefore, data conversion unit, shifter, mixer, key mixer are registers. Four of the 
registers process the input data at the same time stores data temporarily). 

Yang and Roussel are analogous art because both arts focus on the goal of reusing the 
existing hardware resource to reduce the size and cost of the hardware when come to design 
circuits. 
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It would have been obvious to one of ordinary skill in the art at the time of invention to 
apply the Rijndael block cipher algorithm that encrypt/decrypt information on a hardware-critical 
environment to process 128-bit instruction application using 64-bit hardware system teaching of 
Yang by adopting the concept "staggering execution of a single packed data instruction using the 
same circuit" from Roussel to utilize the existing hardware resource, reduce the size and cost of 
hardware. 

As per claim 6 , Yang discloses "The apparatus as claimed in claim 5, wherein the 
round operation execution unit comprises:" (page 3, paragraph 0048, paragraph 0053, "Fig. 4 
illustrates a detailed block diagram of an encryption unit of the block round unit 203 in Fig. 2 
and Fig. 5 illustrates a detailed block diagram of a decryption unit 500 of the block round unit in 
Fig. 2" and "if the decryption is being carried out, the encryption in Fig. 4 is carried out is in 
reverse") "a shift/inverse-shift_row operation means for performing the shift_row 
operation and the inverse shift_row operation of the data;" (Fig. 4, Fig. 5, 
"shifter(shift_row) M in Fig. 4 and "Inverse shift(I_shift_row)" in Fig. 5) "a substitution/inverse- 
substitution operation means for performing the substitution operation and the inverse 
substitution operation of the data" (Fig. 4, Fig. 5, "Data conversion unit (byte sub)" in Fig. 4 
and "data conversion unit (I byte sub)" in Fig. 5) "a mixcolumn/inverse-mixcolumn 
operation means for performing the mixcolumn operation and the inverse mixcolumn 
operation of the data" (Fig. 4, Fig. 5, "Mixer(Mixcolm) in Fig. 4, and "Inverse 
mixer(I mix colm)" in Fig. 5) "and an add-round-key operation means for performing the 
add-round-key operation of the data" (Fig. 4 and Fig. 5, "Key Mixer(Add_round_key)" in 
Fig. 4 and "Key mixer (Add round key)" in Fig. 5) 
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As per claim 7 , Yang discloses "the apparatus as claimed in claim 6, wherein the 
round operation execution unit farther comprises a plurality of demultiplexing means for 
controlling a flow of the data among the substitution/inverse-substitution operation 
means, the mixcolumn/inverse-mixcolumn operation means and the add-round-key 
operation means so as to perform the round operation for the encryption or the round 
operation for the decryption according to an input of a mode signal that indicates the 
encryption or decryption mode" (Fig. 1 or Fig. 2, paragraph 0036, "signals inputted to the 
block round unit 203 include wsel[l :0] informing a size of a key value, Encrypten signal 
informing whether to be encrypt or decrypt"). 

As per claim 8 . Yang discloses "the apparatus as claimed in any one of claims 5 to 
7, wherein the data storage unit includes at least one register, and a total summed size 
of the register is equal to or larger than M (2m-1 )/m bits" (Fig. 5 and Fig. 6, registers are 
intermediate storage units, therefore, there are four registers in Fig. 5 of total 508 bits - 127 bit 
multiplies 4, plus the "outbuffer" storage in Fig. 6 of 127 bit. The total summed sized of the 
register is 635 bit. As applicant states in claim 1 "where m is 2, 3, or 4", if m is 2, M the input 
data in Yang is 127 bit, then M(2m-1 )/m is 1 27(2*2-1 )/2 that equals 190.5 bits. The total 
summed sized of the registers in Yang of 635 bit is large than the 190.5 bit). 

As per claim 9 , Yang discloses "A rijndael block encryption method for receiving M- 
bit input data and N-bit input keys and performing a round operation of the input data for 
a predetermined number of times, the method comprising:" (page 1, column 2, paragraph 
0010, "an apparatus for encrypting/decrypting a real-time input stream" "by constructing 
Rijndael algorithm selected as AES algorithm with hardware". With respect to the limitations of 
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input data and input keys, in Fig. 1 Data in [7:0] appears to be the input data and Key data 
[128,192,256] appear to be the inputs keys. On page 3, column 1, paragraph 0043, with respect 
to predetermined number of times, Yang also discloses "if the block size is 128bits and a size of 
the key value is 256 bits, a count of rounds becomes ' 14"' "if the block size is 128 bits and a size 
of the key value is 128 bits, a count of rounds becomes '10'") "a round operation step of 
performing a round operation with respect to all m data of M/n bits" (page 3, column 1, 
paragraph 0043, Yang discloses "if the block size is 128bits and a size of the key value is 256 
bits, a count of rounds becomes '14'" "if the block size is 128 bits and a size of the key value is 
128 bits, a count of rounds becomes '10'. it shows the relation between the number of round for 
performing round operation and the input data size in Rijndael cipher in the above paragraph; 
therefore, a round operation stop with respect to input data 'M' bit or 'M/n' bit (if M/n equals to 
M. The claim indicates m data belong to M/n, then a round operation stop with respect to all m 
as well.) "The round operation including sub-steps of a shift_row transform for 
performing a shift_row of the M-bit data from a previous round" (Fig. 2, and Fig. 4, "the 
block round unit" in Fig. 2 includes a "shifter (Shift_row)" in Fig. 4 to perform a shift row of 
128 bits [127:0] input data from previous round and outputting data to next transform) "a 
substitution transform for performing a substitution data, a mixcolumn transform for 
performing a mixcolumn of data" (Fig. 4, "Data conversion unit (Byte sub)" to perform a 
substitution data, "Mixer (Mix colm)" to perform a mixcolumn data) "and an add-round-key 
transform for performing an addition of round" (it is a known for one skilled in the art at the 
invention time that to repeating either one specific or plurality additional transform steps when to 
perform a round operation in Rijndael block cipher system during the encryption 
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transformation) "and a round key generation step of generating the round keys in order to 
provide the round keys at the sub-step of the add-round-key transform" (Fig. 2, and page 
3, paragraph 0039-0047, "the Key schedule unit"[reference number 202 in Fig. 2] "find a key for 
encrypting or decrypting each round so as to output the found key to the block round unit 203"). 

Yang fails to disclose "a shift_row transform outputting only M/m-bit (where m is 2, 
3 and 4) data corresponding to a selection signal to a next step", "a substitution 
transform performing of the M/m-bit data and mixcolumn transform performing of the 
M/m-bit data" and "keys having the same size to the M/m-bit data". 

However, Roussel discloses "outputting only M/m-bit (where m is 2, 3 and 4) data 
corresponding to a selection signal to a next step" (column 7, line 53-63, "execution units 
130 and 140 generate output data as two half width data segments". "Two half width data 
segments" means the width of input data M divided by 2 where m is 2. "Low order data is 
output at an OUTLO terminal. High order data is output one clock cycle later at an OUTHI 
terminal. The low and high order output data propagate through separate drivers 330 and 340 to 
the low and high local bypass buses 310 and 320 respectively" serves the function of "selection 
signal to a next step"). Roussel also discloses "a substitution transform performing of the 
M/m-bit data and mixcolumn transform performing of the M/m-bit data" and "keys having 
the same size to the M/m-bit data" " (these two limitations limit same thing which is to divide 
the width of the input data to sub sets to reduce the size hardware. With respect to this 
limitation, Roussel discloses "processing 128-bit instructions using existing 64-bit hardware 
systems without significant changes to the hardware" (column 12, line 1-9)). 
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Yang and Roussel are analogous art because both arts focus on the goal of reusing the 
existing hardware resource to reduce the size and cost of the hardware when come to design 
circuits. 

It would have been obvious to one of ordinary skill in the art at the time of invention to 
apply the Rijndael block cipher algorithm that encrypt/decrypt information on a hardware-critical 
environment to process 128-bit instruction application using 64-bit hardware system teaching of 
Yang by adopting the concept "staggering execution of a single packed data instruction using the 
same circuit" from Roussel to utilize the existing hardware resource, reduce the size and cost of 
hardware. 

As per claim 10 , Yang in view of Roussel disclose claim 9 and "wherein the data can 
be processed through the steps of the shift_row transform, the substitution transform, 
the mixcolumn transform and the add-round-key transform, respectively" (see Yang, Fig. 
4 discloses Shift (Shift row), Data conversion unit (Byte sub), Mixer (Mix_colm), and Key 
Mixer (Add round key)) "the data having the size of M/m bits" (see Roussel, column 12, line 
1-9, "processing 128-bit instructions using existing 64-bit hardware systems without significant 
changes to the hardware) and "a plurality of the M/m-bit data can be processed through the 
plural steps selected among the four steps at the same time according to a 
predetermined timing" (Fig. 4A and Fig. 4B, Fig. 4A discloses a plurality of the input data "M" 
with the width of 128 bits is divided by two of the 64 bits data after ports 1-3. Fig. 4B shows 
that at same time T, plural steps, to be exact two steps, have been processed. Four steps have 
been processed at time T+l etc.) 
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As per claim 11 , Yang discloses "A rijndael block decryption method for receiving 
M-bit input data and N-bit input keys and performing a round operation of the input data 
for a predetermined number of times, the method comprising:" (page 1, column 2, 
paragraph 0010, "an apparatus for encrypting/decrypting a real-time input stream" "by 
constructing Rijndael algorithm selected as AES algorithm with hardware". With respect to the 
limitations of input data and input keys, in Fig. 1 Data in [7:0] appears to be the input data and 
Key data [128,192,256] appear to be the inputs keys. Page 3, column 1, paragraph 0043, with 
respect to the limitation "predetermined number of times", Yang discloses "if the block size is 
128bits and a size of the key value is 256 bits, a count of rounds becomes '14'" "if the block size 
is 128 bits and a size of the key value is 128 bits, a count of rounds becomes '10'") "A round 
operation step of performing a round operation with respect to all m data of M/n bits" 
(page 3, column 1, paragraph 0043, Yang discloses "if the block size is 128bits and a size of the 
key value is 256 bits, a count of rounds becomes ' 14"' "if the block size is 128 bits and a size of 
the key value is 128 bits, a count of rounds becomes '10'. It shows the relation between the 
number of round for performing round operation and the input data size in Rijndael cipher in the 
above paragraph; therefore, a round operation stop with respect to input data 'M' bit or 'M/n' bit 
(if M/n equals to M. The claim indicates m data belong to M/n, then a round operation stop with 
respect to all m as well.) "the round operation including sub-steps of an inverse shift_row 
transform for performing an inverse shift_row of the M-bit data from a previous round 
and outputting data" (Fig. 5, "Inverse shifter (I shift row)to perform an inverse shift row of 
128 bits [127:0] data and outputting to next transform) "an inverse substitution transform for 
performing an inverse substitution inverse-shift_row-transformed data" (Fig. 5, Data 
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conversion unit (I byte sub) to perform an inverse substitute on the output data of Inverse shifter 
(I shift row)) "an add-round-key transform for performing an addition of round keys 
having the same size to inverse-substitution-transformed data, respectively, " (Fig. 5, 
Key mixer (Addroundkey) to perform a add round key transform. Fig. 5 discloses both 
Addroundkey and I byte sub have the same size data of 128 bits [127:0]. The decryption 
transformation order of I-shift_row, I byte sub, and Add round key in Fig. 5 respects to the 
corresponding encryption order in Fig. 4) "and an inverse mixcolumn transform for 
performing an inverse mixcolumn add-round-key-transformed data" (Fig. 5, Inverse mixer 
(I mix colm) to perform inverse mix column on Add round key data) "and a round key 
generation step of generating the round keys in order to provide the round keys at the 
sub-step of the add-round-key transform". (Fig. 2, and page 3, paragraph 0039-0047, "the 
Key schedule unit" [reference number 202 in Fig. 2] "find a key for encrypting or decrypting 
each round so as to output the found key to the block round unit 203"). 

Yang fails to disclose "an inverse shift_row transform outputting only M/m-bit 
(where m is 2, 3 and 4) data corresponding to a selection signal to a next step", "for 
performing an inverse substitution of the M/m-bit data" "round keys having the same 
size to the M/m-bit inverse-substitution-transformed data" and "an inverse mixcolumn of 
the M/m-bit add-round-key-transformed data". 

However, Roussel discloses "outputting only M/m-bit (where m is 2, 3 and 4) data 
corresponding to a selection signal to a next step" (column 7, line 53-63, "execution units 
130 and 140 generate output data as two half width data segments". "Two half width data 
segments" means the width of input data M divided by 2 where m is 2. "Low order data is 
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output at an OUTLO terminal. High order data is output one clock cycle later at an OUTHI 
terminal. The low and high order output data propagate through separate drivers 330 and 340 to 
the low and high local bypass buses 310 and 320 respectively" serves the function of "selection 
signal to a next step"). Roussel also discloses "for performing an inverse substitution of the 
M/m-bit data" "round keys having the same size to the M/m-bit inverse-substitution- 
transformed data" and "an inverse mixcolumn of the M/m-bit add-round-key-transformed 
data" (these three limitations limit same thing which is to divide the width of the input data to 
sub sets to reduce the size hardware. With respect to this limitation, Roussel discloses 
"processing 128-bit instructions using existing 64-bit hardware systems without significant 
changes to the hardware" (column 12, line 1-9)). 

Yang and Roussel are analogous art because both arts focus on the goal of reusing the 
existing hardware resource to reduce the size and cost of the hardware when come to design 
circuits. 

It would have been obvious to one of ordinary skill in the art at the time of invention to 
apply the Rijndael block cipher algorithm that encrypt/decrypt information on a hardware-critical 
environment to process 128-bit instruction application using 64-bit hardware system teaching of 
Yang by adopting the concept "staggering execution of a single packed data instruction using the 
same circuit" from Roussel to utilize the existing hardware resource, reduce the size and cost of 
hardware. 

As per claim 12 , Yang in view of Roussel disclose claim 11, and "wherein the data can 
be processed through the steps of the inverse shift_row transform, the inverse 
substitution transform, the add-round-key transform and the inverse mixcolumn 
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transform, respectively" (see Yang, Fig. 5 discloses transforms of data through "I shift row", 
"I byte sub", "Add round key", and "Imixcolm"); "the data having the size of M/m bits" 
(see Roussel, column 12, line 1-9, "processing 128-bit instructions using existing 64-bit 
hardware systems without significant changes to the hardware) and "a plurality of the M/m-bit 
data can be processed through the plural steps selected among the four steps at the 
same time according to a predetermined timing" (see Roussel, Fig. 4A and Fig. 4B, Fig. 4A 
discloses a plurality of the input data "M" with the width of 128 bits is divided by two of the 64 
bits data after ports 1-3. Fig. 4B shows that at same time T, plural steps, to be exact two steps, 
have been processed. Four steps have been processed at time T+l etc.) 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to JING SIMS whose telephone number is (571)270-7315. The 
examiner can normally be reached on 7:30am-5 :00pm EST, Mon-Thu. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Thomas Pham can be reached on (572)272-3689. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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